Overview

overview

9

Static

static

9

fce657bfcd...de.exe

windows7-x64

9

fce657bfcd...de.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fce657bfcddcdd0b59110e713fd3688ca5e7d4e4efd375d5f780c86412e6a0de

  • Size

    894KB

  • Sample

    221130-b6ltmafh76

  • MD5

    535c08605abd1ad8fccb60413115ec93

  • SHA1

    5ff71dab382fbe4e6159baa65ac7b013e5637fae

  • SHA256

    fce657bfcddcdd0b59110e713fd3688ca5e7d4e4efd375d5f780c86412e6a0de

  • SHA512

    67545f4daea9636fba9825c0b4a94977e59286a0fe8d7786fac92e6810d5a81e34f4f4c6f8fd8729c04ddac881c0fb7d6f48058ee4c02d206450e6959cb9b5da

  • SSDEEP

    24576:MyZGrihlF2cBRkppKgcIYfzZCvFohVUwO:MIGOhlNkppKFIYfzZGFw+w

Score
9/10
cryptonepackerpersistence

Malware Config

Targets

    • Target

      fce657bfcddcdd0b59110e713fd3688ca5e7d4e4efd375d5f780c86412e6a0de

    • Size

      894KB

    • MD5

      535c08605abd1ad8fccb60413115ec93

    • SHA1

      5ff71dab382fbe4e6159baa65ac7b013e5637fae

    • SHA256

      fce657bfcddcdd0b59110e713fd3688ca5e7d4e4efd375d5f780c86412e6a0de

    • SHA512

      67545f4daea9636fba9825c0b4a94977e59286a0fe8d7786fac92e6810d5a81e34f4f4c6f8fd8729c04ddac881c0fb7d6f48058ee4c02d206450e6959cb9b5da

    • SSDEEP

      24576:MyZGrihlF2cBRkppKgcIYfzZCvFohVUwO:MIGOhlNkppKFIYfzZGFw+w

    Score
    9/10
    cryptonepackerpersistence

    • CryptOne packer

      Detects CryptOne packer defined in NCC blogpost.

      cryptonepacker

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks